$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: nJhsWW/60sX/rxs1SAycUnWUUBNvxXFuzt+sdZ9NUBo= Subject key identifier: DF:F5:93:31:91:E5:70:96:AE:02:3E:4D:EC:82:CE:65:48:76:F8:7D Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 12AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 1299 Signing time: Thu 18 Sep 2025 17:14:05 +0000 Manifest this update: Thu 18 Sep 2025 17:14:04 +0000 Manifest next update: Thu 25 Sep 2025 17:14:04 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: 0CD47vMLEZbI9b5gxDrWLWaySiUPZpV7k53ekkjUZvo=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4779 (0x12ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Sep 18 17:14:04 2025 GMT Not After : Sep 25 17:14:04 2025 GMT Subject: CN=68cc3ddc-f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:82:03:e7:af:1a:b1:e2:b8:fd:2f:bd:e7: 00:ff:27:5c:cf:c7:74:f0:47:7f:be:2e:cd:69:5e: 51:1f:9f:f5:5f:41:56:a7:2c:8e:f1:a3:de:d2:f4: 4e:30:93:4a:11:30:aa:91:e9:e6:d1:93:15:d1:a2: b2:63:52:1a:32:33:c6:ee:f4:c8:a7:eb:7a:b5:7f: 27:ad:3c:fd:5a:28:a5:e9:5c:49:bd:a2:1c:ae:09: 5f:1d:49:cf:c6:30:71:3a:10:44:74:54:91:07:4f: 7f:68:31:7e:32:38:c3:16:21:c7:4a:5d:bd:1e:d2: af:cf:80:d4:cf:0e:76:a5:4b:6f:77:66:8b:3d:51: 81:8e:68:0b:19:c2:d8:af:e1:13:11:f1:ca:38:38: 94:9b:d7:40:d2:88:00:fc:49:20:f2:4d:77:0a:6b: 9d:a7:ef:91:f0:7d:ae:74:8e:2e:d9:ee:8e:32:2a: 21:07:9a:53:26:34:68:a4:e4:11:71:fb:b4:69:8b: 19:9e:ee:96:71:8a:ed:96:ef:e5:6f:27:98:fe:de: 5a:f2:86:2c:14:4b:31:81:73:fc:57:2a:c3:39:b0: c4:aa:9c:7e:c2:06:5e:f5:82:5b:44:1f:30:a4:7a: ea:0d:22:42:40:24:c2:ac:0e:f5:dc:8e:95:03:d1: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F5:93:31:91:E5:70:96:AE:02:3E:4D:EC:82:CE:65:48:76:F8:7D X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:0c:cf:16:f2:e6:02:32:e4:ec:84:77:85:87:9b:78:2c:f3: d6:64:86:ea:73:37:a3:0a:e1:cb:22:07:b0:8a:32:b6:8c:0e: 02:c2:bf:f1:fc:6d:ae:88:cf:d9:4b:4b:70:00:2c:d0:f1:83: c9:91:be:bb:82:c2:a4:5a:16:9c:3f:74:7c:5c:c0:f4:64:ab: ec:7d:4c:e3:ca:7c:b3:d6:95:5f:23:e9:31:53:2a:fd:1c:41: 3b:f0:e8:26:dd:71:bf:55:9f:29:cd:aa:a1:d9:99:c9:a5:80: c0:7e:5d:8f:27:ce:01:f0:5a:2f:a8:8f:39:97:21:a3:bb:de: 1e:ef:30:e9:5d:f5:5e:8a:08:0d:b0:af:89:7a:f1:3c:2b:84: e0:6d:c6:fd:54:31:47:43:b7:48:4d:dd:60:18:14:98:54:7c: b0:18:2a:83:9b:c4:ba:de:aa:eb:92:ad:a8:e5:b4:ff:5c:4e: 54:60:94:84:88:90:8e:08:76:1f:53:6c:16:87:ae:aa:9a:c8: 20:54:74:3e:50:53:d0:43:2c:9b:b1:c8:58:9d:85:7c:de:5d: 83:e7:19:79:7e:23:b2:c2:77:10:36:95:37:3b:ad:53:5f:11: 40:b1:70:26:70:dc:e9:3b:7a:d8:8b:55:ec:1e:8e:98:67:4f: 55:25:e1:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwOTE4MTcxNDA0WhcNMjUwOTI1MTcxNDA0WjAYMRYwFAYD VQQDEw02OGNjM2RkYy1mMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJqCA+evGrHiuP0vvecA/ydcz8d08Ed/vi7NaV5RH5/1X0FWpyyO8aPe0vRO MJNKETCqkenm0ZMV0aKyY1IaMjPG7vTIp+t6tX8nrTz9Wiil6VxJvaIcrglfHUnP xjBxOhBEdFSRB09/aDF+MjjDFiHHSl29HtKvz4DUzw52pUtvd2aLPVGBjmgLGcLY r+ETEfHKODiUm9dA0ogA/Ekg8k13Cmudp++R8H2udI4u2e6OMiohB5pTJjRopOQR cfu0aYsZnu6WcYrtlu/lbyeY/t5a8oYsFEsxgXP8VyrDObDEqpx+wgZe9YJbRB8w pHrqDSJCQCTCrA713I6VA9EJ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/1kzGR 5XCWrgI+TeyCzmVIdvh9MB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlDM8W8uYCMuTshHeFh5t4LPPWZIbqczejCuHLIgewijK2jA4Cwr/x /G2uiM/ZS0twACzQ8YPJkb67gsKkWhacP3R8XMD0ZKvsfUzjynyz1pVfI+kxUyr9 HEE78Ogm3XG/VZ8pzaqh2ZnJpYDAfl2PJ84B8FovqI85lyGju94e7zDpXfVeiggN sK+JevE8K4Tgbcb9VDFHQ7dITd1gGBSYVHywGCqDm8S63qrrkq2o5bT/XE5UYJSE iJCOCHYfU2wWh66qmsggVHQ+UFPQQyybschYnYV83l2D5xl5fiOywncQNpU3O61T XxFAsXAmcNzpO3rYi1XsHo6YZ09VJeFT -----END CERTIFICATE-----Generated at Fri Sep 19 01:01:01 2025 by rpki-client